Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Cqe0dCdND4pifYrY0GNQ3wQcTTU.roa
File:                     Cqe0dCdND4pifYrY0GNQ3wQcTTU.roa (raw, json)
Hash identifier:          H5iTJZkCuHXAKCo4BPhFlERXI9ulkLJ6RtsWY9/QUOc=
Subject key identifier:   0A:A7:B4:74:27:4D:0F:8A:62:7D:8A:D8:D0:63:50:DF:04:1C:4D:35
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       018AF1589FFF274FEF2518825622F19B36D0
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Cqe0dCdND4pifYrY0GNQ3wQcTTU.roa
Signing time:             Mon 02 Oct 2023 17:03:51 +0000
ROA not before:           Mon 02 Oct 2023 17:03:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8926
IP address blocks:        93.113.244.0/22 maxlen: 22
                          86.107.64.0/22 maxlen: 22
                          89.46.164.0/22 maxlen: 22
                          188.208.96.0/22 maxlen: 22
                          188.208.104.0/22 maxlen: 22
                          188.214.200.0/21 maxlen: 21
                          89.32.252.0/22 maxlen: 22
                          188.214.228.0/22 maxlen: 24
                          86.107.160.0/21 maxlen: 21
                          188.208.192.0/22 maxlen: 22
                          188.208.204.0/22 maxlen: 22
                          92.114.128.0/18 maxlen: 18
                          92.114.128.0/17 maxlen: 24
                          188.208.112.0/22 maxlen: 22
                          188.208.120.0/21 maxlen: 24
                          89.32.56.0/21 maxlen: 21
                          93.119.200.0/21 maxlen: 21
                          93.119.232.0/21 maxlen: 21
                          93.119.228.0/22 maxlen: 22
                          188.214.60.0/22 maxlen: 22
                          93.113.64.0/21 maxlen: 21
                          188.213.236.0/22 maxlen: 22
                          93.119.160.0/21 maxlen: 21
                          188.213.244.0/22 maxlen: 22
                          93.119.196.0/22 maxlen: 22
                          89.39.96.0/21 maxlen: 21
                          188.214.136.0/22 maxlen: 22
                          89.32.172.0/22 maxlen: 22
                          188.214.147.0/24 maxlen: 24
                          86.106.213.0/24 maxlen: 24
                          89.39.112.0/21 maxlen: 24
                          86.106.208.0/20 maxlen: 20
                          86.106.224.0/19 maxlen: 19
                          86.106.144.0/21 maxlen: 21
                          93.113.80.0/21 maxlen: 21
                          89.32.136.0/21 maxlen: 21
                          93.113.92.0/22 maxlen: 22
                          89.39.76.0/22 maxlen: 22
                          89.39.84.0/22 maxlen: 22
                          178.132.112.0/20 maxlen: 20
                          89.38.32.0/22 maxlen: 22
                          178.132.128.0/18 maxlen: 19
                          89.38.64.0/22 maxlen: 22
                          89.38.76.0/22 maxlen: 22
                          86.105.172.0/22 maxlen: 22
                          93.118.188.0/22 maxlen: 22
                          86.105.80.0/21 maxlen: 21
                          188.213.36.0/22 maxlen: 22
                          188.213.52.0/22 maxlen: 22
                          93.119.96.0/21 maxlen: 21
                          93.119.108.0/22 maxlen: 22
                          93.119.128.0/21 maxlen: 21
                          93.119.140.0/22 maxlen: 22
                          188.213.220.0/22 maxlen: 22
                          93.119.144.0/21 maxlen: 21
                          89.45.40.0/22 maxlen: 22
                          86.105.208.0/22 maxlen: 22
                          109.185.128.0/18 maxlen: 24
                          89.37.104.0/24 maxlen: 24
                          86.104.196.0/22 maxlen: 22
                          109.185.64.0/18 maxlen: 18
                          89.37.44.0/22 maxlen: 22
                          89.44.152.0/22 maxlen: 22
                          86.105.56.0/21 maxlen: 21
                          93.118.176.0/22 maxlen: 22
                          109.185.192.0/18 maxlen: 18
                          93.117.68.0/22 maxlen: 22
                          93.117.72.0/21 maxlen: 21
                          89.36.156.0/22 maxlen: 22
                          85.204.176.0/21 maxlen: 21
                          93.117.48.0/20 maxlen: 20
                          188.212.0.0/22 maxlen: 22
                          188.212.8.0/21 maxlen: 21
                          188.212.24.0/21 maxlen: 21
                          89.43.168.0/22 maxlen: 22
                          188.212.40.0/21 maxlen: 21
                          93.117.128.0/21 maxlen: 21
                          93.117.144.0/21 maxlen: 21
                          93.117.140.0/22 maxlen: 22
                          89.43.128.0/22 maxlen: 22
                          93.117.156.0/22 maxlen: 22
                          109.185.0.0/18 maxlen: 18
                          93.117.160.0/21 maxlen: 21
                          109.185.0.0/16 maxlen: 24
                          93.117.168.0/22 maxlen: 22
                          93.116.128.0/18 maxlen: 18
                          89.42.104.0/22 maxlen: 22
                          188.237.192.0/18 maxlen: 18
                          89.42.128.0/22 maxlen: 22
                          188.237.128.0/18 maxlen: 18
                          93.116.64.0/18 maxlen: 18
                          89.42.64.0/22 maxlen: 22
                          188.237.168.0/24 maxlen: 24
                          89.42.72.0/21 maxlen: 21
                          5.56.64.0/24 maxlen: 24
                          5.56.64.0/18 maxlen: 19
                          5.56.73.0/24 maxlen: 24
                          5.56.72.0/24 maxlen: 24
                          89.42.224.0/22 maxlen: 22
                          188.210.240.0/21 maxlen: 21
                          89.35.200.0/22 maxlen: 22
                          188.210.248.0/22 maxlen: 22
                          93.116.192.0/18 maxlen: 24
                          89.42.180.0/22 maxlen: 22
                          89.34.192.0/21 maxlen: 21
                          94.176.64.0/20 maxlen: 20
                          89.34.204.0/22 maxlen: 22
                          46.55.0.0/18 maxlen: 18
                          46.55.0.0/17 maxlen: 24
                          37.75.64.0/18 maxlen: 19
                          89.34.232.0/22 maxlen: 22
                          188.237.0.0/18 maxlen: 18
                          92.115.192.0/18 maxlen: 18
                          188.237.0.0/16 maxlen: 24
                          212.0.215.0/24 maxlen: 24
                          89.41.64.0/18 maxlen: 24
                          212.0.219.0/24 maxlen: 24
                          37.75.16.0/20 maxlen: 20
                          92.115.128.0/18 maxlen: 18
                          188.209.216.0/21 maxlen: 21
                          93.115.136.0/21 maxlen: 21
                          188.237.64.0/18 maxlen: 18
                          93.116.0.0/18 maxlen: 18
                          89.35.40.0/21 maxlen: 21
                          93.116.0.0/16 maxlen: 24
                          46.55.111.0/24 maxlen: 24
                          89.35.84.0/22 maxlen: 22
                          188.237.24.0/22 maxlen: 24
                          89.35.8.0/21 maxlen: 21
                          46.55.64.0/18 maxlen: 18
                          185.28.104.0/22 maxlen: 24
                          92.114.192.0/20 maxlen: 20
                          92.114.192.0/18 maxlen: 18
                          188.215.236.0/22 maxlen: 22
                          188.215.252.0/22 maxlen: 22
                          92.114.144.0/20 maxlen: 20
                          92.114.160.0/20 maxlen: 20
                          92.114.176.0/20 maxlen: 20
                          92.115.64.0/18 maxlen: 18
                          212.0.192.0/22 maxlen: 22
                          212.0.192.0/19 maxlen: 32
                          212.0.199.0/24 maxlen: 24
                          212.0.195.0/24 maxlen: 24
                          212.0.193.0/24 maxlen: 24
                          89.34.112.0/21 maxlen: 21
                          212.0.198.0/24 maxlen: 24
                          212.0.196.0/24 maxlen: 24
                          212.0.200.0/21 maxlen: 24
                          212.0.203.0/24 maxlen: 24
                          212.0.208.0/20 maxlen: 24
                          212.0.210.0/24 maxlen: 24
                          92.115.0.0/18 maxlen: 18
                          89.40.228.0/22 maxlen: 22
                          92.115.0.0/16 maxlen: 24
                          89.34.64.0/21 maxlen: 21
                          2a02:a30:1600::/48 maxlen: 48
                          2a02:a30:172::/48 maxlen: 48
                          2a02:a30:6330:103::/64 maxlen: 64
                          2a02:a30:f090::/44 maxlen: 48
                          2a02:a30::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f1:58:9f:ff:27:4f:ef:25:18:82:56:22:f1:9b:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Oct  2 17:03:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0aa7b474274d0f8a627d8ad8d06350df041c4d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:0a:e3:e7:d7:f8:9d:4d:8b:ff:5e:d4:7a:
                    22:c3:39:cc:21:f5:fd:bb:ea:c0:eb:7e:d3:b6:45:
                    b3:24:77:ad:22:16:6d:d5:bb:bb:53:57:f9:6f:f6:
                    81:21:6d:cc:48:6f:46:d7:f2:43:df:a1:4c:71:87:
                    e3:12:9b:c3:32:c9:df:78:ab:b8:62:ae:29:94:2f:
                    59:f0:2e:a2:13:00:a5:e3:13:76:cc:e1:13:f5:33:
                    42:bf:21:c7:24:fb:90:72:85:c8:fb:22:14:34:99:
                    be:f5:3a:a2:4f:22:3c:b6:c1:a4:92:b1:5a:d5:84:
                    6e:ce:a7:63:8f:bf:c6:e7:63:8f:9e:e4:27:6d:5d:
                    30:7b:99:e1:27:44:30:36:2f:ad:15:1f:95:2d:5d:
                    9c:00:fa:1e:f7:87:59:41:8b:78:31:2d:ad:d8:59:
                    ca:af:d1:a0:24:cd:8c:ed:66:1f:ef:a9:15:6a:c4:
                    e5:fc:ee:0d:dc:12:db:68:3a:0f:0c:d0:31:06:c5:
                    4a:68:0f:fc:28:b9:7e:63:de:4c:7a:73:af:88:45:
                    7f:bf:d1:31:f0:f1:54:e3:96:d7:92:1c:cc:61:b8:
                    1d:ce:e8:97:3e:84:57:b8:0a:11:e2:b1:cf:6b:39:
                    ed:a5:86:88:cd:3e:0e:a9:5f:d2:49:a5:66:b0:07:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:B4:74:27:4D:0F:8A:62:7D:8A:D8:D0:63:50:DF:04:1C:4D:35
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Cqe0dCdND4pifYrY0GNQ3wQcTTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.64.0/18
                  37.75.16.0/20
                  37.75.64.0/18
                  46.55.0.0/17
                  85.204.176.0/21
                  86.104.196.0/22
                  86.105.56.0/21
                  86.105.80.0/21
                  86.105.172.0/22
                  86.105.208.0/22
                  86.106.144.0/21
                  86.106.208.0-86.106.255.255
                  86.107.64.0/22
                  86.107.160.0/21
                  89.32.56.0/21
                  89.32.136.0/21
                  89.32.172.0/22
                  89.32.252.0/22
                  89.34.64.0/21
                  89.34.112.0/21
                  89.34.192.0/21
                  89.34.204.0/22
                  89.34.232.0/22
                  89.35.8.0/21
                  89.35.40.0/21
                  89.35.84.0/22
                  89.35.200.0/22
                  89.36.156.0/22
                  89.37.44.0/22
                  89.37.104.0/24
                  89.38.32.0/22
                  89.38.64.0/22
                  89.38.76.0/22
                  89.39.76.0/22
                  89.39.84.0/22
                  89.39.96.0/21
                  89.39.112.0/21
                  89.40.228.0/22
                  89.41.64.0/18
                  89.42.64.0/22
                  89.42.72.0/21
                  89.42.104.0/22
                  89.42.128.0/22
                  89.42.180.0/22
                  89.42.224.0/22
                  89.43.128.0/22
                  89.43.168.0/22
                  89.44.152.0/22
                  89.45.40.0/22
                  89.46.164.0/22
                  92.114.128.0-92.115.255.255
                  93.113.64.0/21
                  93.113.80.0/21
                  93.113.92.0/22
                  93.113.244.0/22
                  93.115.136.0/21
                  93.116.0.0/16
                  93.117.48.0/20
                  93.117.68.0-93.117.79.255
                  93.117.128.0/21
                  93.117.140.0-93.117.151.255
                  93.117.156.0-93.117.171.255
                  93.118.176.0/22
                  93.118.188.0/22
                  93.119.96.0/21
                  93.119.108.0/22
                  93.119.128.0/21
                  93.119.140.0-93.119.151.255
                  93.119.160.0/21
                  93.119.196.0-93.119.207.255
                  93.119.228.0-93.119.239.255
                  94.176.64.0/20
                  109.185.0.0/16
                  178.132.112.0-178.132.191.255
                  185.28.104.0/22
                  188.208.96.0/22
                  188.208.104.0/22
                  188.208.112.0/22
                  188.208.120.0/21
                  188.208.192.0/22
                  188.208.204.0/22
                  188.209.216.0/21
                  188.210.240.0-188.210.251.255
                  188.212.0.0/22
                  188.212.8.0/21
                  188.212.24.0/21
                  188.212.40.0/21
                  188.213.36.0/22
                  188.213.52.0/22
                  188.213.220.0/22
                  188.213.236.0/22
                  188.213.244.0/22
                  188.214.60.0/22
                  188.214.136.0/22
                  188.214.147.0/24
                  188.214.200.0/21
                  188.214.228.0/22
                  188.215.236.0/22
                  188.215.252.0/22
                  188.237.0.0/16
                  212.0.192.0/19
                IPv6:
                  2a02:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:30:59:1f:58:31:1c:8c:62:ec:59:82:05:aa:37:12:0c:f6:
         93:56:6f:68:46:05:1a:5b:e1:d3:46:28:d0:25:c1:a8:6d:ce:
         b3:d3:3c:ec:b4:ba:b6:a3:64:fc:9b:89:da:2d:9d:23:85:10:
         5a:24:61:6e:0e:1b:74:45:e2:9d:ca:86:e4:a8:e8:7a:4c:06:
         db:4f:4f:d0:f9:8f:40:15:11:44:f3:33:62:32:9d:35:df:69:
         6b:9e:9f:ad:ad:d4:ff:9e:d7:8c:62:be:ce:45:ca:e7:34:9f:
         49:a4:97:33:47:49:5b:d0:c1:db:1f:bd:91:ec:47:79:53:b2:
         a2:cd:fe:e1:b2:a3:e3:1e:58:30:68:df:c5:64:3b:01:ee:bc:
         1f:c7:16:7f:65:61:25:19:ee:a9:00:87:4f:6c:9d:f1:ce:a6:
         b1:c6:a9:08:29:aa:14:30:df:2f:7d:34:52:47:8e:2b:c7:8c:
         69:d6:7e:ae:99:64:b1:08:71:d9:d0:49:df:f5:3f:c4:3e:3e:
         dc:9a:61:10:60:0a:85:d6:c6:7f:cd:6f:10:b4:7f:67:a8:5c:
         b0:9f:a7:82:b8:b9:07:79:3c:fe:ac:45:3a:ec:16:d7:fd:51:
         53:64:63:e2:b6:fe:08:7f:33:a5:5a:f0:15:87:e2:a4:05:49:
         86:a7:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:10:58 2025 by rpki-client